Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Won't stay connected

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 4 posts
The problem started when I had to start reconnecting and repairing my connection on my network card. I figured that I had a virus and began asking questions and running virus and malware programs. I ran CCleaner first and cleaned everything it found, but there about a 5 Meg IE file that returns each time I clean it. I don't know what it is. Then used Hijack This which I have since discovered may not be up to date. I have run everything suggested on your page, and the OTL hangs while checking WmNmPnSA and stays there. Below are my log files:

GMER - http://www.gmer.net
Rootkit scan 2010-01-23 16:57:59
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\Owner\LOCALS~1\Temp\fgrcypog.sys

---- System - GMER 1.0.15 ----

SSDT 8902B8A0 ZwAssignProcessToJobObject
SSDT 8902ACB0 ZwOpenProcess
SSDT 8902B0D0 ZwOpenThread
SSDT 8902B6D0 ZwSuspendProcess
SSDT 8902B4F0 ZwSuspendThread
SSDT 8902AEE0 ZwTerminateProcess
SSDT 8902B310 ZwTerminateThread
SSDT \??\C:\WINDOWS\system32\Drivers\uphcleanhlp.sys ZwUnloadKey [0xADE096D0]

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice \Driver\Tcpip \Device\Tcp epfwtdir.sys (ESET Antivirus Network Redirector/ESET)

Device \FileSystem\Fastfat \Fat ACF75D20

AttachedDevice \FileSystem\Fastfat \Fat eamon.sys (Amon monitor/ESET)

---- Threads - GMER 1.0.15 ----

Thread System [4:416] 89029930

---- EOF - GMER 1.0.15 ----

Malwarebytes' Anti-Malware 1.44
Database version: 3621
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

23.01.2010 17:02:36
mbam-log-2010-01-23 (16-23-22).txt

Scan type: Quick Scan
Objects scanned: 107182
Time elapsed: 3 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\forceclassiccontrolpanel (Hijack.ControlPanelStyle) -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Any help or advise will be greatly appreciated!
  • 0




    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
I think it may be repaired. I now understand the the errors were related to what I installed to remove the problem. I installed another network driver and patch. If the problem reoccurs, I will clean install Windows 7.
  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP